Skip to content

v1.11.0

Choose a tag to compare

View all tags
@selfhosthub selfhosthub released this 26 Oct 07:52
· 2 commits to main since this release
v1.11.0
79d294a

Studio 1.11.0

Upgrade impact: Back up the database before you upgrade. On first boot, migrations encrypt
the secrets, tokens and webhook values already stored, and there is no downgrade path after
that. Nothing else to do: the encryption key is the one console already set at install.

Components: api 1.9.0, ui 1.6.0, workers 1.11.1, console 1.9.1 (unchanged).

New

  • Every secret Studio stores is encrypted at rest. Organization secrets, provider
    credentials, webhook tokens, secret node parameters and run-form secrets are sealed in the
    database, and a write guard refuses any plaintext secret before it reaches a table.
  • Members see secrets as configured, never as values. Secret fields, headers and node
    webhook values stay with admins; copies, imports and marketplace installs drop them.
  • Wait for Webhook checks the callback's auth. API Key or JWT auth with no secret answers 401.
  • Logs and tracebacks are scrubbed of secret values in the API and the workers.
  • Steps are called nodes everywhere a user reads them, and every page uses one label per thing.
  • Notifications can be deleted or marked unread, and a rejected approval records its reason.

Fixed

  • Chatterbox Turbo text to speech works. Every Turbo job failed on load before this release.
  • Runs, approvals and manual nodes hand off correctly: a skipped first node, an approval,
    a rerun approval and a manual node after an approval each wait or complete as they should.
  • Organization settings save only the section you edit, so saving one form no longer
    overwrites another.
  • Lists fit phones: tables keep the name and actions, dialogs scroll inside themselves.
  • Files and audit logs search on the server, and files keep their real upload names.
  • Run actions are limited to the run's owner or an admin, and the webhook token is admin only.
  • Dependencies refreshed: Pillow 13, next 16.4, cloudflared 2026.10.3, PyJWT 2.15.0,
    certifi, urllib3 and the Debian base packages.

Catalog

  • 23 providers move one patch version: node wording, services in create, read, update, delete
    order, and the Discord webhook URL treated as a secret. OpenAI Chat Completion sends
    max_completion_tokens.
  • Docs catalog 1.0.4: node wording throughout.

Images

All 9 images published to GHCR with tags :1.11.0 and :latest.

docker pull ghcr.io/selfhosthub/studio-api:1.11.0
docker pull ghcr.io/selfhosthub/studio-ui:1.11.0
docker pull ghcr.io/selfhosthub/studio-worker-general:1.11.0
docker pull ghcr.io/selfhosthub/studio-worker-transfer:1.11.0
docker pull ghcr.io/selfhosthub/studio-worker-video:1.11.0
docker pull ghcr.io/selfhosthub/studio-worker-comfyui:1.11.0
docker pull ghcr.io/selfhosthub/studio-worker-audio:1.11.0
docker pull ghcr.io/selfhosthub/studio-core:1.11.0
docker pull ghcr.io/selfhosthub/studio-full:1.11.0

Operators normally pull these via studio-console rather than directly.

Baked tools

  • studio-console 1.9.1 - baked into studio-core and studio-full images.
Assets 2
Loading